IBM Support

PH37067: CWPKI0045E CORRECTION

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • The CWPKI0045E indicates a signer with a SubjectDN
    was sent from a remote server, and that a signer with that
    SubjectDN may need to be added to the truststore as seen below:
    
    ----
    CWPKI0045E: SSL HANDSHAKE FAILURE: A signer with SubjectDN
    ?CN=hostname,OU=Company" was sent from a target host.
    The signer may need to be added to local trust store
    ?safkeyring:///WASkeyring" located in SSL configuration
    alias ?NodeDefaultSSLSettings" loaded from SSL configuration
    file ?security.xml?.
    ----
    
    The certificate with SubjectDN is the personal certificate sent
    from the remote server, and the signer certificate that signed
    that personal certificate would need to be added to the
    truststore.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server                                      *
    ****************************************************************
    * PROBLEM DESCRIPTION: A serviceability improvement to the     *
    *                      CWPKI0045E message to make the proposed *
    *                      solution more precise.                  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    A serviceability improvement to the CWPKI0045E message to make
    the
    proposed solution more precise.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PH37067

  • Reported component name

    WEBSPHERE FOR Z

  • Reported component ID

    5655I3500

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-05-10

  • Closed date

    2021-07-13

  • Last modified date

    2021-07-13

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE FOR Z

  • Fixed component ID

    5655I3500

Applicable component levels

  • R850 PSY

       UP

[{"Line of Business":{"code":"LOB36","label":"IBM Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850"}]

Document Information

Modified date:
16 July 2021